I guess it was bound to happen

2012-08-10 Thread Robert Rhodes
Hello everyone. I have a site where a password is required to access the site. On pages in the site, there are links to download files. I set the appropriate meta tags and robots.txt to tell the search engines to not spyder the site. Though the site pages are not in google, the files are

Re: I guess it was bound to happen

2012-08-10 Thread Brian Thornton
Are you using IIS security for login or CFM security? On Fri, Aug 10, 2012 at 1:02 PM, Robert Rhodes rrhode...@gmail.com wrote: Hello everyone. I have a site where a password is required to access the site. On pages in the site, there are links to download files. I set the appropriate

Re: I guess it was bound to happen

2012-08-10 Thread Russ Michaels
CF can only protect CF files if they web accessible. If you request a PDF file for example, CF is never involve din this process. The best solution is to use server side security to password protect folder and not CF. If you are on APACHE then simply use .htaccess for this. If you are on

Re: I guess it was bound to happen

2012-08-10 Thread John M Bliss
The only way to reliably do this is to make it so the files' directory is not accessible via HTTP. The two most common ways to do this are: - put directory above / outside the webroot - tell IIS / Apache / webserver to disregard directory (if it's under / inside webroot) ...and then retrieve /

CFspreadsheet issue

2012-08-10 Thread Bruce Sorge
Hello list, Long time (years) no post. I am trying to read from a spreadsheet that is loaded up onto the server and then insert the information into the database. I have three column headers called Code, Barcode and ResortID. Code and Barcode have values and ResortID is empty. The reason

Re: I guess it was bound to happen

2012-08-10 Thread Alan Rother
+1 what John said, I was just going to send the same link =] On Fri, Aug 10, 2012 at 11:07 AM, John M Bliss bliss.j...@gmail.com wrote: The only way to reliably do this is to make it so the files' directory is not accessible via HTTP. The two most common ways to do this are: - put

RE: CFspreadsheet issue

2012-08-10 Thread Sandra Clark
I'm seeing a missing # sign after Form.Request -Original Message- From: Bruce Sorge [mailto:sor...@gmail.com] Sent: Friday, August 10, 2012 2:28 PM To: cf-talk Subject: CFspreadsheet issue Hello list, Long time (years) no post. I am trying to read from a spreadsheet that is loaded

Re: CFspreadsheet issue

2012-08-10 Thread Bruce Sorge
Yeah I picked up on that and still the same issue. On Aug 10, 2012, at 1:00 PM, Sandra Clark sclarkli...@gmail.com wrote: I'm seeing a missing # sign after Form.Request ~| Order the Adobe Coldfusion Anthology now!

Re: I guess it was bound to happen

2012-08-10 Thread Claude Schnéegans
I set the appropriate meta tags and robots.txt to tell the search engines to not spyder the site. Only well behaving bot will follow the robot.txt recommandations. There are also bad bots which don't care reading the file, and very bad bots which do read the file in the only purpose to

Re: CFspreadsheet issue

2012-08-10 Thread Cameron Childress
Did you pick up the missing commas between the cfparams? They need commas, just like the field list. That would give a mismatched column count error. -Cameron On Fri, Aug 10, 2012 at 3:05 PM, Bruce Sorge sor...@gmail.com wrote: Yeah I picked up on that and still the same issue.

Re: I guess it was bound to happen

2012-08-10 Thread Russ Michaels
the problem with serving files using CF is that you are putting considerable extra load onto CF, as it has to load the load into memory and then serve it. If its a busy site serving lots of files then this may well overload your cfserver, especially if your on shared hosting. by using .htaccess

Re: CFspreadsheet issue

2012-08-10 Thread Scott Stewart
You do know your query names don't match up.. Your reading the spreadsheet into a query object called DealsDSN and looping over an object called MahDSN On Fri, Aug 10, 2012 at 2:27 PM, Bruce Sorge sor...@gmail.com wrote: Hello list, Long time (years) no post. I am trying to read from a

Re: CFspreadsheet issue

2012-08-10 Thread Bruce Sorge
Thanks Cameron. I have been out of the game so long I am making noob mistakes, LOL. On Aug 10, 2012, at 1:33 PM, Cameron Childress camer...@gmail.com wrote: Did you pick up the missing commas between the cfparams? They need commas, just like the field list. That would give a mismatched

Re: I guess it was bound to happen

2012-08-10 Thread Bryan Stevenson
simply put sensitive files outside the web root and have CF pull them as needed - no spider is going to index inaccessible files ;-) my 2 cents in the 20 seconds I thought about this HTH ;-) ...and I'm sure you'll get loads of other options - this one to me is simple and solid Cheers On Fri,

Problem with Authentication on IIS 7.5 Scheduled Task

2012-08-10 Thread Carl Von Stetten
I have ColdFusion 10 running on Windows Server 2008R2, using IIS7.5 as web server. I have an intranet application configured to use Windows Authentication with NTLM, which works very well. However, I have an issue with executing scheduled tasks. The files are part of this same application,

Re: Problem with Authentication on IIS 7.5 Scheduled Task

2012-08-10 Thread Carl Von Stetten
Digging a little more into IIS (by the way, I Googled IIS 7.5 stuff for a while before my initial post) - I checked the Authorization Rules for the subdirectory in question. I changed the Allow rule to include All anonymous users instead of All users. Didn't help. -Carl

Re: Problem with Authentication on IIS 7.5 Scheduled Task

2012-08-10 Thread Russ Michaels
Try different browser and see if it still works, you may be using cached login which is why it seems to work in browser. Do you have cf running under a custom user? Regards Russ Michaels On Aug 10, 2012 9:39 PM, Carl Von Stetten vonner.li...@vonner.net wrote: I have ColdFusion 10 running on

Re: Problem with Authentication on IIS 7.5 Scheduled Task

2012-08-10 Thread Russ Michaels
Try different browser and see if it still works, you may be using cached login which is why it seems to work in browser. Do you have cf running under a custom user Regards Russ Michaels On Aug 10, 2012 9:39 PM, Carl Von Stetten vonner.li...@vonner.net wrote: I have ColdFusion 10 running on

Re: Problem with Authentication on IIS 7.5 Scheduled Task

2012-08-10 Thread Carl Von Stetten
Russ, Cached login might be right. I just tried the URL in Firefox, and was prompted to login. I think the security of the site is superseding the security I am trying to set on the subdirectory. Maybe I'll create a special site on this server just for scheduled tasks, with anonymous

Re: Problem with Authentication on IIS 7.5 Scheduled Task

2012-08-10 Thread Dave Watts
And yes, CF is running under a custom Active Directory account that has been granted rights to the entire directory structure, so it should be able to access the file in question. That won't help with CFHTTP requests. CF doesn't use service account credentials for HTTP authentication, and

Re: Problem with Authentication on IIS 7.5 Scheduled Task

2012-08-10 Thread Russ Michaels
Looks like you haven't got that subdir set to anon access properly. Chech the authentication settings on another site for comparison to see what it should be. It needs to run under the iis_iusr account. Or you could just put login details in the scheduled task. Regards Russ Michaels On Aug 10,

Re: I guess it was bound to happen

2012-08-10 Thread Robert Rhodes
Yes, I am using CF for login security. Thanks to all for the suggestions. While I am considering the various suggestions, I renamed the directory and removed the insecure page that had links to the files (the client put this page up with he cms). I then changed all the links on the secure

Extracting text from various file-types

2012-08-10 Thread Robert Rhodes
Hello again to all. I need a way to extract text from word, excel, text, pdf, and ppt files with Coldfusion, as the files are each submitted via a form. The output does not have to be particularly pretty or nicely formatted -- just plain text that can be stored and searched later. Any ideas?

Re: Extracting text from various file-types

2012-08-10 Thread Bruce Sorge
Check out the CFFILE tag. That offers this type of functionality. Bruce On Aug 10, 2012, at 4:07 PM, Robert Rhodes rrhode...@gmail.com wrote: Hello again to all. I need a way to extract text from word, excel, text, pdf, and ppt files with Coldfusion, as the files are each submitted via

Re: Problem with Authentication on IIS 7.5 Scheduled Task

2012-08-10 Thread Carl Von Stetten
Dave, How would you create the USERNAME with PASSWORD? I'm not sure I follow (I looked in IIS under Basic Authentication, and the only thing you can set there is Default Domain and Realm). -Carl And yes, CF is running under a custom Active Directory account that has been granted rights

Re: Problem with Authentication on IIS 7.5 Scheduled Task

2012-08-10 Thread Dave Watts
How would you create the USERNAME with PASSWORD? I'm not sure I follow (I looked in IIS under Basic Authentication, and the only thing you can set there is Default Domain and Realm). In Windows, you need to create whatever accounts you want to use for authentication. In IIS, you need to

Re: Problem with Authentication on IIS 7.5 Scheduled Task

2012-08-10 Thread Carl Von Stetten
Since this is a new server setup, I don't have another site to compare to. I do have this working on an older Windows Server 2003/IIS 6, but things have changed a lot in IIS 7.5. I've checked all the settings in the web server config files (and they look correct), restarted IIS several

Re: Problem with Authentication on IIS 7.5 Scheduled Task

2012-08-10 Thread Russ Michaels
Surely you have the default website still? Regards Russ Michaels On Aug 10, 2012 11:26 PM, Carl Von Stetten vonner.li...@vonner.net wrote: Since this is a new server setup, I don't have another site to compare to. I do have this working on an older Windows Server 2003/IIS 6, but things

Re: Problem with Authentication on IIS 7.5 Scheduled Task

2012-08-10 Thread Carl Von Stetten
Nope. One of the early steps in the ColdFusion lockdown guide has you remove the Default web site for security. -Carl Surely you have the default website still? Regards Russ Michaels ~| Order the Adobe Coldfusion Anthology

Re: Extracting text from various file-types

2012-08-10 Thread Robert Rhodes
Hi Bruce. Thanks for the reply. I did, but no luck. On text files, I got the text just fine. On Word docs, I got the text but with a whole bunch of garbage in the return. On ppt, pdf, and excel docs, they all come out as unreadable garbage. I tried both the read and readbinary actions and

Re: Problem with Authentication on IIS 7.5 Scheduled Task

2012-08-10 Thread Carl Von Stetten
OK. I created a local Windows user account named SchedTasks. I gave that account read permissions to the folder. I set Anonymous Authentication to Enabled just for that folder, and set the credentials to use the SchedTasks account. In the CF Scheduled Task, I specified SchedTask for the

Re: Problem with Authentication on IIS 7.5 Scheduled Task

2012-08-10 Thread Russ Michaels
So just.create a new site. Regards Russ Michaels On Aug 10, 2012 11:35 PM, Carl Von Stetten vonner.li...@vonner.net wrote: Nope. One of the early steps in the ColdFusion lockdown guide has you remove the Default web site for security. -Carl Surely you have the default website still?

Re: Extracting text from various file-types

2012-08-10 Thread Bruce Sorge
For word, did you add the attribute in cffile action=readbinary? For excel, there is a cfspreadsheet tag that will read a spreadsheet and you can put a query attribute on it and output the result. For PDF's, there is a cfpdf tag that you can use. Obviously you will have to get the file type

Re: Problem with Authentication on IIS 7.5 Scheduled Task

2012-08-10 Thread Dave Watts
OK. I created a local Windows user account named SchedTasks. I gave that account read permissions to the folder. I set Anonymous Authentication to Enabled just for that folder, and set the credentials to use the SchedTasks account. In the CF Scheduled Task, I specified SchedTask for

Re: Extracting text from various file-types

2012-08-10 Thread Leigh
I do not have the URL handy but take a look at Raymond Camden's blog. He wrote an entry on extracting text from MS Office documents using POI.  For PDF, use cfpf's extract text option. -Leigh ~| Order the Adobe Coldfusion